PT-2025-9179 · Ibm · Ibm Controller

Published 2025-03-01 · Updated 2025-08-08 · CVE-2024-41778

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Controller versions 11.0.0 through 11.0.1 IBM Controller version 11.1.0

Description The issue makes it easier for attackers to compromise user accounts because it does not require strong passwords by default.

Recommendations For IBM Controller versions 11.0.0 through 11.0.1, consider configuring the system to enforce strong password requirements. For IBM Controller version 11.1.0, consider configuring the system to enforce strong password requirements. As a temporary workaround, consider implementing additional authentication measures to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-521

Related Identifiers

CVE-2024-41778

Affected Products

Ibm Controller

References · 7

• https://osv.dev/vulnerability/CVE-2024-41778 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-41778 · Security Note
• https://t.me/cvenotify/112992 · Telegram Post
• https://ibm.com/support/pages/node/7184423 · Vendor Advisory, Patch
• https://t.me/cveNotify/131505 · Telegram Post
• https://twitter.com/CVEnew/status/1895981978706723244 · Twitter Post
• https://t.me/cvedetector/19240 · Telegram Post